Data Processing Agreement
Last updated: March 2026
1. Purpose
This annex sets out the conditions under which ModuShop processes personal data on behalf of the Client in the context of the Service.
2. Role of the parties
- The Client acts as the data controller.
- ModuShop acts as the data processor within the meaning of Regulation (EU) 2016/679 (GDPR).
3. Nature of data processed
The data that may be processed includes, but is not limited to:
- End customer data of the Client (name, email, address);
- Order data;
- Contact data;
- Support data.
The exact categories depend on the Client's use of the Service.
4. Purpose of processing
ModuShop processes data exclusively for the following purposes:
- Providing the SaaS Service;
- Ensuring hosting;
- Ensuring maintenance and security;
- Providing technical support.
No commercial use of data is made by ModuShop.
5. Client instructions
ModuShop processes data only on documented instructions from the Client.
6. Security
ModuShop implements reasonable technical and organisational measures to protect data against:
- unauthorised access;
- loss;
- alteration;
- disclosure.
7. Sub-processors
ModuShop may engage technical sub-processors (hosting provider, third-party services).
ModuShop ensures that they provide sufficient guarantees regarding data protection.
8. Transfers outside the EU
Data is hosted within the European Union.
Any potential transfer outside the EU would be governed by appropriate safeguards in accordance with the GDPR.
9. Assistance
To the extent possible, ModuShop assists the Client in:
- responding to data subject rights requests;
- notifying a data breach.
10. Data disposition at end of contract
At the end of the contract, a standard data export is made available to the Client.
Data may be deleted after a reasonable period following the end of the contract.